Buffer Overflow Vulnerability in Linux Kernel Affecting Timerlat Functionality

CVE-2025-38493

What is CVE-2025-38493?

A buffer overflow vulnerability resides in the Linux Kernel affecting the timerlat functionality during its stack saving process. This issue can cause kernel panics, as erroneous memcpy operations result in illegal memory writes, leading to system instability. By mishandling stack entry sizes, the vulnerability permits out-of-bounds memory writes, which under certain conditions can invoke crashes within the kernel. A patch has been developed to ensure proper population of the size field before executing the memcpy, effectively mitigating this risk and preventing unintended kernel crashes.

References